Update to new upstream Firefox version 3.5.4, fixing multiple security issues detailed in the upstream advisories:
http://www.mozilla.org/security/known- vulnerabilities/firefox35.html#firefox3.5.4 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1531 advisory.

    SeaMonkey is an open source Web browser, email and newsgroup client, IRC     chat client, and HTML editor.

    A flaw was found in the way SeaMonkey creates temporary file names for     downloaded files. If a local attacker knows the name of a file SeaMonkey is     going to download, they can replace the contents of that file with     arbitrary contents. (CVE-2009-3274)

    A heap-based buffer overflow flaw was found in the SeaMonkey string to     floating point conversion routines. A web page containing malicious     JavaScript could crash SeaMonkey or, potentially, execute arbitrary code     with the privileges of the user running SeaMonkey. (CVE-2009-1563)

    A flaw was found in the way SeaMonkey handles text selection. A malicious     website may be able to read highlighted text in a different domain (e.g.
    another website the user is viewing), bypassing the same-origin policy.
    (CVE-2009-3375)

    A flaw was found in the way SeaMonkey displays a right-to-left override     character when downloading a file. In these cases, the name displayed in     the title bar differs from the name displayed in the dialog body. An     attacker could use this flaw to trick a user into downloading a file that     has a file name or extension that differs from what the user expected.
    (CVE-2009-3376)

    Several flaws were found in the processing of malformed web content. A web     page containing malicious content could cause SeaMonkey to crash or,     potentially, execute arbitrary code with the privileges of the user running     SeaMonkey. (CVE-2009-3380)

    All SeaMonkey users should upgrade to these updated packages, which correct     these issues. After installing the update, SeaMonkey must be restarted for     the changes to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host has a version of Mozilla Firefox earlier than 3.0.15 / 3.5.4 installed.  Such versions are potentially affected by multiple vulnerabilities : 

 - A user's form history, both from web content as well as the smart location bar, was vulnerable to theft. (MFSA 2009-52)
 - The file naming scheme used for downloading a file which already exists in the download folder is predictable.  An attacker with local access could exploit this to trick the browser into opening the incorrect downloaded file. (MFSA 2009-53)
 - Recursive creation of JavaScript web-workers can be used to create a set of objects whose memory could be freed prior to their use. Note that this only affects Firefox 3.5.x. (MFSA 2009-54)
 - A flaw exists in the parsing of regular expressions used in Proxy Auto-configuration (PAC) files. (MFSA 2009-55)
 - A heap-based overflow exists in Mozilla's GIF image parser. (MFSA 2009-56)
 - The XPCOM utility 'XPCVariant: : VariantDataToJS' unwrapped doubly-wrapped objects before returning them to chrome callers which could lead to chrome privileged code calling methods on an object which had previously been created or modified by web content. (MFSA 2009-57)
 - A heap-based overflow exists in Mozilla's string to floating point number conversion routines. (MFSA 2009-59)
 - The text within a selection on a web page can be read by JavaScript in a different domain using the 'document.getSelection' function, violating the same-origin policy. (MFSA 2009-61)
 - When downloading a file containing a right-to-left override character (RTL) in the filename, the name displayed in the dialog title bar conflicts with the name of the file shown in the dialog body. (MFSA 2009-62)
 - Multiple memory safety and stability bugs exist in the 'liboggz', 'libvorbis', and 'liboggplay' libraries.  Note that this issue only affects Firefox 3.5.x. (MFSA 2009-63)
 - Several memory corruption issues exist in the browser engine. (MFSA 2009-64)

The remote host has a version of Mozilla Firefox earlier than 3.0.15 / 3.5.4 installed.  Such versions are potentially affected by multiple vulnerabilities : 

  - A user's form history, both from web content as well as the smart location bar, was vulnerable to theft. (MFSA 2009-52)

  - The file naming scheme used for downloading a file which already exists in the download folder is predictable.  An attacker with local access could exploit this to trick the browser into opening the incorrect downloaded file. (MFSA 2009-53)

  - Recursive creation of JavaScript web-workers can be used to create a set of objects whose memory could be freed prior to their use. Note that this only affects Firefox 3.5.x. (MFSA 2009-54)

  - A flaw exists in the parsing of regular expressions used in Proxy Auto-configuration (PAC) files. (MFSA 2009-55)

  - A heap-based overflow exists in Mozilla's GIF image parser. (MFSA 2009-56)

  - The XPCOM utility 'XPCVariant: : VariantDataToJS' unwrapped doubly-wrapped objects before returning them to chrome callers which could lead to chrome privileged code calling methods on an object which had previously been created or modified by web content. (MFSA 2009-57)

  - A heap-based overflow exists in Mozilla's string to floating point number conversion routines. (MFSA 2009-59)

  - The text within a selection on a web page can be read by JavaScript in a different domain using the 'document.getSelection' function, violating the same-origin policy. (MFSA 2009-61)

  - When downloading a file containing a right-to-left override character (RTL) in the filename, the name displayed in the dialog title bar conflicts with the name of the file shown in the dialog body. (MFSA 2009-62)

  - Multiple memory safety and stability bugs exist in the 'liboggz', 'libvorbis', and 'liboggplay' libraries.  Note that this issue only affects Firefox 3.5.x. (MFSA 2009-63)

  - Several memory corruption issues exist in the browser engine. (MFSA 2009-64)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
42297	Fedora 11 : Miro-2.5.2-5.fc11 / blam-1.8.5-15.fc11 / chmsee-1.0.1-12.fc11 / eclipse-3.4.2-17.fc11 / etc (2009-10878)	Nessus	Fedora Local Security Checks	2009/10/29	2021/1/11	critical
42288	RHEL 4 : seamonkey (RHSA-2009:1531)	Nessus	Red Hat Local Security Checks	2009/10/28	2025/8/15	critical
5218	Mozilla Firefox < 3.0.15 / 3.5.4 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2009/10/28	2019/3/6	medium
801352	Mozilla Firefox < 3.0.15 / 3.5.4 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2009/10/28		high

検出

プラグインの検索

critical

critical

medium

high